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MEMORANDUM FOR: 
VIA: 

FROM: 

SUBJECT: 

REFERENCES: 


Director of Central Intelligence 
General Counsel 
John F. Blake 

Deputy Director for Administration 
Security Provisions in Agency Contracts 

(a) Memo to DCI, dtd 1 Jun 78, fm DDA, 

no subject (DD/A 78-2042/1) 1 3'f 4 ' 

(b) Memo to DDA, dtd 6 Jun 78, fm DCI, 

Subject: Contracting Procedures op 

Security (ER 78-1465/3) 


1. Reference ( a ) was an update on the status of actions . 

we are taking in the area of industrial security. Reference (b) j 

indicated your concern with the development of a "performance 
clause" which would subject a contractor to penalties in the 
event of a leak of security information. 


2. It appears that we are involved in uncharted waters 
when we attempt to use a penalty approach in Government contract- 
ing to enforce security requirements. While we can say with 
absolute certainty that a contractor is contractually required 

to meet all the security requirements of his contract, the legal 
mechanisms to enforce performance have not been tested by Boards 
of Contract Appeals or in the Courts. The Office of General 
Counsel has found no cases in which a contract has been terminated 
for default based upon a violation of security. 

3. The legal bases for attributing the acts of an agent 
(employee) to his principal (contractor) are well established in 
Government contracting. If a contractor cumulatively fails to 
live up to the standard of duty required in: (1) the selection 
of the employee who is given access to classified information; 

(2) the method of training of that employee; (3) the method and 
character and intensity of supervision of that employee; and, 

(4) enforcement of the contractor’s own policy and procedures 
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SUBJECT: Security Provisions in Agency Contracts 


with respect to handling classified material, *»is liability 
for the employee's actions can be affixed under the heading 
of either lack of good faith or willful misconduct. Tho 
burden of proof in this regard would be with the Government. 
Inasmuch as we approve the contractor’s security procedures 
and grant approvals for persons to be given access to classi- 
fied data, the possibility for our shifting the total respon- 
sibility to the contractor for a breach of contract for a 
security violation by one of his employees is rather remote. 

4. Specific contract penalties, outside the very drastic 
step of termination for default, are also difficult to assess. 

The Task Force on Industrial Security and Industrial Contracting 
in Reconcendation No. 17 of its Interim Report suggested That 
incentive award fee type contracts include security performance 
along with other performance requirements as a basis for tec 
determination." This concept, which you approved, can be 
ianleaented to provide reward/penalty for various levels of 
contractor performance. Khile there are reasons other than 
profit on an instant contract which motivate a contractor to 
do a good job, a portion of an award fee, associated with 
security, could provide a meaningful incentive to a contractor. 
The rewards and penalties (profit and loss) that a contractor 
earns on other than cost-plus-award-fee (CFAF) contracts are 
based on objective ceasurec-ents in terms of cost, performance, 
and schedule. The introduction of a subjective or even objee- 
tivc seasure for reward or penalty, based upon security, would 
probably not provide a meaningful incentive to a contractor 
unless a preponderance of foe or profit was associated with it. 
This then could become counterproductive to the incentive 
placed on operational and funding aspects of the contract. 

Such an incentive would also be difficult, if not inpossible, 
to administer and measure. 

5. Attached hereto is a proposed contract article entitled, 
"Special Security Provisions" which highlights the importance 
we place on security in performance of the contract and sots 
forth the penalty a contractor is subject to in the event he 
fails to comply therewith. It should he noted that t.iis article 
makes uoro specific certain rights which are inherent in the 
"default" and "termination" provisions of Government contracts. 
However, the article does include som-e language which may go 
too far in attributing the action of a contractor's employee 
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SUBJECT: Security Provisions in Agency Contracts 


to the contractor. Because we are, in effect, creating new 
contract provisions and inserting language which is not a 
part of existing procurement regulations, we have ashed 
General Counsel to provide his comments on the enforceability 
and effectiveness of these provisions for your consideration, 
prior to implementation. Additionally, we should give con- 
sideration to soliciting industry comments in order to test 
acceptance of our contractors, which could possibly result in 
some beneficial suggestions. 

1 6 JUN 1978 


John P. Blake 

Att 


Distribution: 
Orig - DC I 
1 - DDCI 
1 - ER 

1 - OGC 
1 - D/Sec 
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SPECIAL SECURITY PROVISIONS 


(a) The contractor shall maintain and administer in 
accordance with industrial security manuals and agreement 
incorporated with the schedule of ihis contract, I «cu?i?y 
program which meets the requirements of these documents. V 

p__i .fk) Reference is made to the article of the General 
TnS ^° nS enbltled "Default" ("Termination"). It is agreed 
administl? tood that failure of the contractor to maintain and 
seci?iti ful lf compliant with the 

fo^terminat ion'foi- 1 " default ! S C0 " traCt ’ C ° nStUutes founds 

default 5 wf?hn i f i rt lly> the contract ls subject to immediate 

Wlt 5° Ut tbe Requirement of a 10-day cure notice where 
it has been determined by the contracting officer that failure 

^ f ?i ly r C ° mpl ^ W i th t] ? e securit y requirements of the contract 
esults from willful misconduct or lack of good faith on the 
part of any one of the contractor's directors or officers or 
on the part of any of his managers, superintendents or other 
equivalent representatives who have supervision or direction of 

business, A or ° T substant iall 7 al * of the contractor’s 

(2) All or substantially all of the contractor’s 

at an y on ? P lant separate location in 
hich this contract is being performed, or 

(3) A_ separate and complete major industrial 
contract? " connectIon with the performance of this 

Reference is made to Article 24 of Section A of rho r * i 
Provisions entitled "Non-Publicitv " viniatin the General 
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(d) Where deficiencies in the contractor’s security 
program are noted, the contractor shall be provided a written 
notice of these deficiencies and given a period of 10 days to 
take corrective action. If the contractor fails to take the 
necessary corrective action, the Government may terminate the 
whole or any part of this contract for default. 

(e) The basis for the procedure (whether a 10-day notice 
is required or not) to be followed for termination of this 
contract under the provisions of this clause is a unilateral 
decision of the contracting officer and is not subject to the 
disputes clause of the contract. The factual basis upon which 
the default notice was issued is subject to the disputes clause 
of the contract. 


2 
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DD/A Rsgistry 


OGC 78-3463 


1 JUN *978 


izr-A 




MEMORANDUM FOR: 
FROM: 

REFERENCE : 


Director of Central Intelligence 
John F. Blake 

Deputy Director for Administration' 

Memo dtd 15 May 78 to DDA fm DCI 
no subject * 


" ' ' '" t 0 ,vhile £ ?h e p^ocldMes" 

able'to report thSl^h ZlMVn a^pSed!^’ 1 “ 

f crisis j H S^v. 

be completed by 16 June 1978. ? P 1S ’ These actions will 

accepted the responsibility r for C strenPth° G ^ °\ 12 August 1977 

clauses in our contracts y u n „„ tr engthenmg the security 

that improved^ontract Clauses e in r anr?^ C -F S i J v? SeqUent1 ^ advi ^ ed 
solve the problem without developing R ?f a ?er”’oreJ ?S - W 0 Uld a n0t 
formity in our industrial security manuals Precision and uni- 
for this rewrite of sen.-ri i-v m o , manual 5 The responsibility 

in August 1978 and has been^ssian^ ^ scheduled for completion 
Industrial Security Branch the .”ewly created 

it would be possible SeCurit >'- I believe 

in conjunction with these new manuals. " eW COntract clauses 
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5. In addition to the above efforts, action has been 
taken in other significant areas as follows: 

a. Letter from DCI to all Agency contractors 
who maintain classified intelligence information 

m their plants stressing the importance of security 
and need for involvement of senior corporate officials; 

b. A program of surprise industrial security 
audits and inspections of contractor facilities. 

A total of 25 surveys has been completed as of 
this date; . 

c * Initiation of the polygraph program for 
key contractor employees; and 

d. Establishment of a suitability panel to 
review contractor clearances. STATINTL 

6. I win keep you advised as actions are completed. 




WT3 





John F. Blake 
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15 MAY 1978 


MEMORANDUM FOR: Deputy Director for Administration 
FR0M: Director of Central Intelligence 

I ve lost the bubble on when we're going to get some teeth into 

our contracting procedures so that we can hold a contractor responsible 
for security lapses. 

STATINTL 


^-^OlANiUhLU IURNER 
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MEMORANDUM FOR: Deputy Director for Administration 
FROM: Director of Central Intelligence 

SUBJECT: Contracting Procedures on Security 


1. I read your memo on the progress with inserting more security 
considerations into our contracting. Since then I have had one additional 
thought. 


2. You indicated that before we can modify the contracts themselves 
we have to clean up our security regulations to make them more explicit. 

That is certainly worth doing in any event. At the same time, I'm not 
sure that my primary objective in contracting is related to the security 
regulations we promulgate. What I am most specifically interested in is 
a "performance clause." What I have in mind is a clause that says if 
it is determined that security information has leaked out of the contractor's 
organization it is subject to penalties. This is not a question of whether 
he followed rules such as three combination safes and two locks on the 
doors, etc., but simply a question of whether there was a leak attributable 
to his operation. Clearly in the Boyce/Lee case this would have been 
operative. In many others, it would be difficult if not impossible to 
adjudicate responsibility. There would also be difficult issues as to 
whether the contractor is responsible for an employee who is too garrulous 
in a bar as opposed to the physical removal of classified data or equipment 
from his plant. I don't know how all of these would be worked out, but it 
seems to me consideration of this type of provision need not await a better 
definition of our security procedures. 



25X1 A 




lUKNtK 


OL 8 2541 
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